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Top Stories 

• The Web site of Bitcoin exchange Mt. Gox was disabled and the company confirmed that it 
indefinitely halted withdrawals from its trading accounts after detecting unusual activity. - 
USA Today; Associated Press (See item 3) 

• The Federal Trade Commission stopped a work-from-home scheme that conned consumers 
out of millions of dollars through the sale of bogus resources and coaching services. - Time 
(See item 4 ) 

• A Holland America cruise ship experienced a possible norovirus outbreak when 1 14 
passengers and 10 crew members suffered from symptoms during a week-long trip to the 
Caribbean. - CNN (See item 10 ) 

• Cybercriminals utilizing the Pony botnet stole more than 700,000 account credentials and 
$220,000 worth of virtual currencies. - Softpedia (See item 21 ) 
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Energy Sector 



Nothing to report 
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Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 

1. February 24, Associated Press - (New Mexico) New Mexico: Radiation leak is 
detected. The U.S. Department of Energy said February 24 that more airborne 
radiation was detected in southeastern New Mexico from a leak the week of February 
17 at the Waste Isolation Pilot Plant after collected samples were tested. Officials stated 
that there is no public health threat. 

Source: http://www.nytimes.com/2014/02/25/us/new-mexico-radiation-leak- 
detected.html 
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Critical Manufacturing Sector 

Nothing to report 
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Defense Industrial Base Sector 

2. February 24, U.S. Naval Institute - (National) Cracking found in Marine joint strike 
fighter won’t delay program. On-the-ground stress testing of the U.S. Marine Corps 
(USMC) version of Fockheed Martin’s F-35 jet revealed cracks in 3 of 6 of the test 
aircraft’s bulkheads, leading to a structural redesign and the development of structural 
retrofits. The finding does not impact current F-35B flying operations and is not 
expected to delay the USMC’s 2015 Initial Operations Capability date. 

Source: http://news.usni.org/2014/02/24/cracking-found-marine-ioint-strike-fighter- 
wont-delay-program 
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Financial Services Sector 

3. February 25, USA Today; Associated Press - (International) Bitcoin exchange Mt. 
Gox goes offline amid turmoil. The Web site of Bitcoin exchange Mt. Gox was 
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disabled February 25 and the company confirmed that it indefinitely halted withdrawals 
from its trading accounts earlier in February after detecting unusual activity. 

Source: http://www.usatodav.com/storv/tech/2014/02/25/mt-gox-offline/5801093/ 

4. February 24, Time - (Utah) Feds target multi-million dollar work-from-home 
scheme. The Federal Trade Commission announced February 24 that it stopped a 
deceptive work-from-home scheme that conned consumers out of millions of dollars 
through the sale of bogus resources and business coaching services falsely claiming to 
aid the launch of an online business. 

Source: http://business.time.com/2014/02/24/ftc-work-from-home-scheme/ 

5. February 24, WSMV 4 Nashville - (Tennessee) Two men accused in Murfreesboro 
credit card theft scheme. Murfreesboro, Tennessee police arrested 2 individuals the 
week of February 17 after a search of their motel room for unrelated charges uncovered 
an embossment credit card-making machine and nearly 200 credit cards. Authorities 
believe the suspects may be connected to a multi-state credit card number theft ring. 
Source: http://www.wsmv.com/story/24809993/two-men-accused-in-murfreesboro- 
credit-card-theft- scheme 

6. February 24, Wausau Daily Herald - (Wisconsin) Weston man accused of selling 
fake stocks, stealing $100,000. Marathon County officials issued an arrest warrant for 
a Weston man suspected of deceiving three individuals out of nearly $100,000 by 
selling fraudulent shares of publicly traded stock. 

Source: 

http://www.wausaudailvherald.com/article/20140224/WDH0101/302240284/Weston- 

man-accused-stock-scheme 

For another story, see item 21 

T Return to top i 

Transportation Systems Sector 

7. February 25, Shamokin News-Item - (Pennsylvania) Rocks let loose, close portion of 
Route 147 for nearly 7 hours. The Pennsylvania Department of Transportation closed 
down both lanes of Route 147 for about 7 hours February 24 as a precaution to clear 
rocks and debris after a rockslide in the area of Brush Valley Road. 

Source: http://newsitem.com/news/rocks-let-loose-close-portion-of-route-147-for- 
nearly-7-hours- 1.1639973 

8. February 24, KTVB 7 Boise - (Idaho) Warm temperatures lead to closure of 
‘Avalanche Alley.’ A 12-mile stretch of Idaho 21 in Boise County was closed 
indefinitely February 24 by the Idaho Transportation Department due to the possibility 
of avalanches after warm temperatures melted snow in the existing snowpack. 

Source: http://www.ktvb.com/news/Warm-temperatures-lead-to-closure-of-Avalanche- 
Alley-246948031.html 
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9. February 24, WDSU 6 New Orleans - (Louisiana) Coast Guard: Miss. River opens 
after collision causes oil spill. The Mississippi River reopened with restrictions 
February 24 after two barges collided near Vacherie and spilled approximately 31,500 
gallons of light crude oil February 22. 

Source: http://www.wdsu.com/news/around-louisiana/coast-guard-barges-collide-in- 
miss-river-cause-oil-spill/24628998#mid=l 83 12466 

10. February 23, CNN - (International) CDC looking into possible norovirus outbreak 
on cruise ship. A Holland America cruise ship experienced a possible norovirus 
outbreak when 114 passengers and 10 crew members suffered from symptoms during a 
week-long trip to the Caribbean that returned to its Fort Lauderdale port February 22. 
The U.S. Centers for Disease Control and Prevention will conduct an environmental 
health assessment to evaluate possible causes of the outbreak. 

Source: http://www.cnn.com/2014/Q2/23/travel/cdc-cruise-ship- 
norovirus/index.html?hpt=us c2 
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Food and Agriculture Sector 

11. February 25, KSTP 5 St. Paul - (Minnesota) Salmonella sickens nearly 2 dozen at 
Maple Grove Old Country Buffet. Minnesota Health Department officials are 
investigating a Salmonella Enteritidis outbreak at an Old Country Buffet in Maple 
Grove that hospitalized 1 and sickened 22 others after eating at the restaurant in 
January. 

Source: http://kstp.com/news/stories/s3337795.shtml 

12. February 24, Waterloo Cedar Falls Courier - (Iowa) Grundy Co. man charged with 
theft of grain. Grundy County officials arrested a man allegedly connected to the theft 
or misappropriation of a semi-truck load of grain from the Mid- Iowa Co-op in Beaman 
in November 2012. 

Source: http://wcfcourier.com/news/local/crime-and-courts/grundy-co-man-charged- 
with-theft-of-grain/article 20a804a4-a0bd-5d5e-alc6-eb3416bbd7bl.html 
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Water and Wastewater Systems Sector 

Nothing to report 



[ Return to top ] 



Healthcare and Public Health Sector 

13. February 25, San Francisco Chronicle - (California) Covered California’s website 
back after 5-day shutdown. The Web site for Covered California, the State’s health 
exchange, was back online February 24 after it shut down February 19 due to software 
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issues. Engineers continue to investigate the outage, but suspect a malfunction occurred 
during planned, routine maintenance. 

Source: http://www.sfgate.com/health/article/Covered-Califomia-s-website-is-back- 
after-a-5263523.php 
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Government Facilities Sector 

14. February 25, Alexandria Town Talk - (Louisiana) Pineville man arrested after school 
bus accident sends 8 teens to hospital. A Rapides Parish school bus was hit by a truck 
in the city of Pineville February 25, leaving eight children with minor injuries. 

Source: http://www.thetowntalk.com/article/20140225/NEWS01/140225003/8- 
children-iniured-when-pickup-hits-school-bus-Pineville 

15. February 24, Bellingham Flerald- (Washington) Bellingham area could get more 
snow Monday; schools closed, thousands without power. Snow storms February 23 
prompted the closure of Whatcom County public schools, Bellingham Technical 
College, and Whatcom Community College in Washington February 24. 

Source: http://www.bellinghamherald.com/2014/02/24/3495652/bellingham-area- 
could-get-3-to.html 

16. February 24, KXLY 4 Spokane - (Washington) Newport High School closed Tuesday 
for continued fire clean up. Newport High School in Bellevue remained closed 
February 25 for continued cleanup after a small fire February 21. Classes will resume 
February 26 while some areas of the school will remain closed for several weeks. 
Source: http://colvillestevenscountv.kxly.eom/news/news/l 2 1581 -newport-high- 
school-closed-tuesday-continued-fire-clean 

17. February 24, WPEC 12 West Palm Beach - (Florida) Gas leak forces evacuation at 
Palm Beach County School Board. Employees were evacuated from the Palm Beach 
County School Board headquarters in Florida February 24 after a gas leak was reported 
in the kitchen area of the main building. The building remains closed while officials 
investigate. 

Source: http://www.cbsl2.com/news/top-stories/stories/vid 13535.shtml 

18. February 24, Charleston Post and Courier - (South Carolina) No bomb found after 
threat near courthouses in downtown Charleston. The federal courthouse in 
downtown Charleston, South Carolina, was evacuated for 2 hours February 24 after an 
individual called 9-1-1 and claimed a van parked outside the courthouse held 
explosives. Police cleared the scene when no suspicious devices were found after 
searching the area. 

Source: http://www.postandcourier.com/article/20140224/PC16/14Q229696/threats- 
disrupt-proceedings-at-county-federal-courthouses-in-downtown-charleston 
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Emergency Services Sector 



19. February 24, WNBC 4 New York City - (New York) Fire in NY firehouse injures 1 
firefighter, damages equipment. A February 24 fire at the Goldens Bridge firehouse 
in Westchester County left one firefighter injured and caused nearby fire companies to 
take over their calls indefinitely due to damage to the building, two fire trucks, and a 
rescue truck. 

Source: http://www.nbcnewyork.com/news/local/Firehouse-Fire-Westchester- 
Waccabuc-Road-Goldens-Bridge-246886601.html 

20. February 22, KOCO 5 Oklahoma City - (Oklahoma) Rifles, SWAT gear stolen from 
police cars in Norman. Police are searching for the individual responsible for breaking 
into three police vehicles February 18-19 in Norman, Oklahoma, and stealing guns and 
SWAT gear. 

Source: http://www.koco.com/news/oklahomanews/norman/rifles-swat-gear-stolen- 
from-police-cars-in-norman/24625408?hpt=iu bn2 
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Information Technology Sector 

21. February 25, Softpedia - (International) Cybercriminals use Pony botnet to steal 
700,000 account credentials, virtual currencies. Experts found that cybercriminals 
managed to steal more than 700,000 credentials for Web sites, email accounts, File 
Transfer Protocol (FTP) servers, Secure Shell (SSH), and Virtual Desktops utilizing the 
Pony botnet. The botnet was also used to steal $220,000 worth of virtual currencies 
targeting Bitcoin and other virtual currency wallets. 

Source: http://news.softpedia.com/news/Cvbercriminals-Use-Ponv-Botnet-to-Steal- 
700-000-Account-Credentials-Virtual-Currencies-429170.shtml 

22. February 25, Softpedia - (International) EC-Council says its servers haven’t been 
hacked. EC-Council announced that its Web site was targeted by a hacker who 
redirected the site’s visitors via a Domain Name System (DNS) hijack to a defacement 
page hosted by a Finland-owned company. The organization stated that its servers were 
not breached and continues to investigate the incident. 

Source: http://news.softpedia.com/news/EC-Council-Savs-Its-Servers-Haven-t-Been- 
Hacked-429307.shtml 

23. February 23, Dark Reading - (International) Researchers bypass protections in 
Microsoft’s EMET security tool. Bromium Labs researchers found a flaw in 
Microsoft’s Enhanced Mitigation Experience Toolkit (EMET) 4.1 that could potentially 
allow attackers to sneak malware past it through bypassing several key defenses, taking 
advantage of its reliance on known vectors of return-oriented programming (ROP) 
exploitation attack methods. 

Source: http://www.darkreading.com/attacks-breaches/researchers-bypass-protections- 
in-micros/240166227 
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Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

Nothing to report 
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Commercial Facilities Sector 

24. February 25, New Haven Register - (Connecticut) Hamden apartment building fire 
displaces 30, sends pregnant woman to hospital. Three people were hospitalized and 
30 residents were displaced by a fire that broke out at an apartment complex in 
Hamden, Connecticut, February 24. 

Source: http://www.nhregister.com/general-news/20140225/hamden-apartment- 
building-fire-displaces-30-sends-pregnant-woman-to-hospital 

25. February 25, WNBC 4 New York City - (New York) 8 fires set in 2 Queens malls, 
suspect arrested. Police arrested and charged a suspect accused of setting a total of 
eight fires at stores in the Rego Center and Queens Center malls between February 21 
and 24. No one was injured by the fires, but inventory was damaged and some stores 
were evacuated. 

Source: http://www.nbcnewvork.com/news/local/Arson-Fires-Clothing-Sears-Macys- 
Burlington-Coat-Queens-24694636 1 .html 

26. February 23, WBZ 4 Boston - (Maine) Seven taken to hospital after CO issue at 
Ogunquit motel. Authorities believe a furnace is to blame for a carbon monoxide 
incident that sickened 21 individuals at the Falls Motel in Ogunquit, Maine February 
23. Seven of those individuals were transported to area hospitals with carbon monoxide 
poisoning symptoms. 

Source: http://boston.cbslocal.com/2014/02/23/authorities-responding-to-co-issue-in- 
ogunquit/?hpt=us bn7 
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Dams Sector 



27. February 24, WSAU 550 AM Wausau/99.9 FM Rudolph - (Wisconsin) Levee fails on 
Sherwood Lake. Due to a levee failure at Sherwood Lake in southeast Clark County, 
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the Wisconsin Department of Natural Resources ordered a drawdown of the lake in 
order to make repairs. All access to the lake was blocked off indefinitely due to unsafe 
ice conditions. 

Source: httD://wsau.com/news/articles/2014/feb/24/levy-fails-on-sherwood-lake/ 
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NTAS 



NO ACTIVE ALERTS 
www.DHS.gov/alerts 



Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 



About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support@ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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